Title; method and apparatus for a secure virtual machine 
Applicants: William R. Bush, et al. 
Docket No.: 06502.0357 

Attorney of Record: C. Larry O'Rourke, Reg. No. 26,014 
Attorney Phone No.: (650) 849-6600 
Page 1 of 5 p ages 



100 



NATIVE 
MODULE 



145 1 30 1 40 



TRUSTED 
CLASSES 



UNTRUSTED 



library CLASSES 
classes 



VIRTUAL MACHINE 



OPERATING SYSTEM 


HARDWARE 







Fig.1 



Title: METHOD AND APPARATUS FOR A SECURE VIRTUAL MACHINE 

Applicants: William R. Bush, et al. 
Docket No.: 06502.0357 

Attorney of Record: C. Larry O'Rourke, Reg. No. 26,014 
Attorney Phone No.: (650) 849-6600 
Page 2 of 5 pages 



^45 /1 40 



TRUSTED 
CLASSES 


UNTRUSTED 
CLASSES 


145 140 

/ / 


TRUSTED 
CLASSES 


UNTRUSTED 
CLASSES 



Fig. 2A 



Fig. 2B 



210(PRIVLEGE 
INFORMATION) 



TRUSTED 
CLASSES 




UNTRUSTED 
CLASSES 





Fig. 2C 



210(PRIVLEGE 
INFORMATION) 



TRUSTED 




UNTRUSTED 


CLASSES 




CLASSES 



Fig. 2D 



Title: METHOD AND APPARATUS FOR A SECURE VIRTUAL MACHINE 

Applicants: William R. Bush, et al. 
Docket No.: 06502.0357 

Attorney of Record: C. Larry O'Rourke, Reg. No. 26,014 
Attorney Phone No.: (650) 849-6600 
P age 3 of 5 pages 



145 




Fig. 3 



. .Ue. M:: , i-,OJ A\J A,-,-^AaA . uS ,-0.^ A S^Cu.^^ V,R ; uA^ .V.AC, .,\^ 

Applicants: William R. Bush, et al. 
Docket No.: 06502.0357 

Attorney of Record: C. Larry O'Rourke, Reg. No. 26,014 
Attorney Phone No.: (650) 849-6600 
Page 4 of 5 pages 



210 



SUBCLASS ATTRIBUTE 



410 



420 



NEW INSTANCE ATTRIBUTE 



METHOD INVOCATION ATTRIBUTE 



TRUSTED DATA ACCESS ATTRIBUTE 



Fig. 4 



Title: METHOD AND APPARATUS FOR A SECURE VIRTUAL MACHINE 

Applicants: William R. Bush, et al. 
Docket No.: 06502.0357 

Attorney of Record: C. Larry O'Rourke, Reg. No. 26,014 
Attorney Phone No.: (650)849-6600 
Page 5 of 5 pages 



START^ 



Untrusted class requests 
access to trusted class 
operation 



Request is detected 






Privilege flag for operation 
in trusted class is checked 








Access Granted 



No Access Granted 



No Access Granted 



Figure 5 



